wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

the final byte of a pkcs7 padded plaintext can never be 0

Browse source 
Submitted by: K S Sreeram <sreeram@tachyontech.net>
This commit is contained in:
Nils Larsch 2005-07-20 22:03:36 +00:00
parent 0066590f98
commit b554eef43b
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
crypto/evp/evp_enc.c
View file

@ -449,7 +449,7 @@ int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
}
OPENSSL_assert(b <= sizeof ctx->final);
n=ctx->final[b-1];
if (n > (int)b)
if (n == 0 || n > (int)b)
{
EVPerr(EVP_F_EVP_DECRYPTFINAL_EX,EVP_R_BAD_DECRYPT);
return(0);